Your policy is only protecting you if you enforce it

Apple is not being accused of gathering user data and passing it along to advertisers. In fact, such data collection without users’ consent is a violation of Apple’s privacy policy. Instead, Apple is accused of allowing the violation of its own policy.

This is an issue that I keep on repeating every time that a new unenforceable standard or policy comes around for review or is being drafted. Sometimes I have my way and only things that can be enforced are put in the standard. More often standards and policies read like wishlist, rather than something that the company can actually commit to.

Beware, your policy can and will be held against you if you cannot enforce it. Or if you do not enforce it diligently.